New sssd-krb5 settings for laptops. Do not use DNS SRV records to find
KDCs, but always use kerbers.puavo_domain and kerberos_master. Should
work better for fallbacks, but a more dynamic solution would be nice.